Sample krb5.conf File

A sample krb5.conf file is provided in the untarred_path/NovellKerberosKDC/setup directory. You can use the /etc/krb5.conf configuration file to set the default values. While managing Novell Kerberos KDC, when you do not specify any of the mandatory parameters, the values are taken from the /etc/krb5.conf file. This file looks similar to the following:

[libdefaults] 
default_realm = ATHENA.MIT.EDU

[realms]
ATHENA.MIT.EDU = {
max_life = 10h 0m 0s
max_renewable_life = 7d 0h 0m 0s
acl_file = /opt/novell/kerberos/kadm5.acl
dict_file = /opt/novell/kerberos/kadm5.dict
kdc = kerberos.mit.edu
admin_server = kerberos-1.mit.edu
kpasswd_server = kerberos-1.mit.edu
database_module = ldapconf
}

[kdcdefaults]
num_threads = 10

[domain_realm]
.mit.edu = ATHENA.MIT.EDU
mit.edu = ATHENA.MIT.EDU

[logging]
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
kpasswd_server = FILE:/var/log/kpasswdd.log

[dbdefaults]
database_module = ldapconf

[dbmodules]
ldapconf = {
db_library = kdb_ldap
ldap_ssl_port = 636
ldap_kdc_dn = "cn=KDC Server - kerberos.mit.edu,o=mit"
ldap_kadmind_dn = "cn=Admin Server - kerberos.mit.edu,o=mit"
ldap_kpasswdd_dn = "cn=Passwd Server - kerberos.mit.edu,o=mit"
ldap_root_certificate_file = /opt/novell/kerberos/TrustedRoot-
ldap-server1.mit.edu.der /opt/novell/kerberos/TrustedRoot-ldap
-server2.mit.edu.der
ldap_service_password_file = /opt/novell/kerberos/keyfile
realm_read_refresh_interval = 300
ldap_servers = ldap-server1.mit.edu ldap-server2.mit.edu:1636
ldap_conns_per_server = 5
}